Question 1

You want to archive data in Cloud Storage. Because some data is very sensitive, you want to use the “Trust No One” (TNO) approach to encrypt your data to prevent the cloud provider staff from decrypting your data. What should you do?

Options :

A : Use gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key and unique additional authenticated data (AAD). Use gsutil cp to upload each encrypted file to the Cloud Storage bucket, and keep the AAD outside of Google Cloud.

B : Use gcloud kms keys create to create a symmetric key. Then use gcloud kms encrypt to encrypt each archival file with the key. Use gsutil cp to upload each encrypted file to the Cloud Storage bucket. Manually destroy the key previously used for encryption, and rotate the key once and rotate the key once.

C : Specify customer-supplied encryption key (CSEK) in the .boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in Cloud Memorystore as permanent storage of the secret.

D : Specify customer-supplied encryption key (CSEK) in the .boto configuration file. Use gsutil cp to upload each archival file to the Cloud Storage bucket. Save the CSEK in a different project that only the security team can access.

Answer: B

Question 2

You are using BigQuery with a regional dataset that includes a table with the daily sales volumes. This table is updated multiple times per day. You need to protect your sales table in case of regional failures with a recovery point objective (RPO) of less than 24 hours, while keeping costs to a minimum. What should you do?

Options :

A : Schedule a daily BigQuery snapshot of the table.

B : Schedule a daily export of the table to a Cloud Storage dual or multi-region bucket.

C : Schedule a daily copy of the dataset to a backup region.

D : Modify ETL job to load the data into both the current and another backup region.

Answer: A

Question 3

A European health care company uses Cloud Pub/Sub as part of a data processing pipeline. The CTO of the company is concerned that data might accidentally be written to a region outside the European Union, which would violate the GDPR regulation. What would you recommend the company does to ensure data stays within Google Cloud regions in the European Union?

Options :

A : Set a Resource Location Restriction organization policy to ensure all topics are stored only in acceptable regions.

B : Set a Resource Location Restriction organization policy to ensure all buckets are stored only in acceptable regions.

C : Only define Cloud Pub/Sub endpoints in acceptable regions when creating topics.

D : Only define Cloud Pub/Sub endpoints in acceptable regions when creating subscriptions.

Answer: A

Question 4

You have a BigQuery dataset named "customers". All tables will be tagged by using a Data Catalog tagtemplate named "gdpr". The template contains one mandatory field, "has sensitive data~. with a boolean value.All employees must be able to do a simple search and find tables in the dataset that have either true or false inthe "has sensitive data" field. However, only the Human Resources (HR) group should be able to see the datainside the tables for which "hass-ensitive-data" is true. You give the all employees group thebigquery.metadataViewer and bigquery.connectionUser roles on the dataset. You want to minimizeconfiguration overhead. What should you do next?

Options :

A : Create the "gdpr" tag template with private visibility. Assign the bigquery -dataViewer role to the HRgroup on the tables that contain sensitive data.

B : Create the ~gdpr" tag template with private visibility. Assign the datacatalog. tagTemplateViewer roleon this tag to the all employeesgroup, and assign the bigquery.dataViewer role to the HR group on the tables that contain sensitive data.

C : Create the "gdpr" tag template with public visibility. Assign the bigquery. dataViewer role to the HRgroup on the tables that containsensitive data.

D : Create the "gdpr" tag template with public visibility. Assign the datacatalog. tagTemplateViewer role onthis tag to the all employees.group, and assign the bijquery.dataViewer role to the HR group on the tables that contain sensitive data.

Answer: D

Question 5

You are running a Dataflow streaming pipeline, with Streaming Engine and Horizontal Autoscaling enabled.You have set the maximum number of workers to 1000. The input of your pipeline is Pub/Sub messages withnotifications from Cloud Storage One of the pipeline transforms reads CSV files and emits an element forevery CSV line. The Job performance is low. the pipeline is using only 10 workers, and you notice that theautoscaler is not spinning up additional workers. What should you do to improve performance?

Options :

A : Use Dataflow Prime, and enable Right Fitting to increase the worker resources

B : Update the job to increase the maximum number of workers.

C : Enable Vertical Autoscaling to let the pipeline use larger workers.

D : Change the pipeline code, and introduce a Reshuffle step to prevent fusion.

Answer: D

Confidently Practice Online with Free Professional-Data-Engineer Exam Cram

Buying Options: